ZAP Full Scan Report
- Dominant language
- TSQL
- Stars
- 7
- Forks
- 27
- Avg merge
- 3d 16h
- Merged PRs (30d)
- 26
Description
- Site: [https://dev-pims.th.gov.bc.ca](https://dev-pims.th.gov.bc.ca)
**New Alerts**
- **Timestamp Disclosure - Unix** [10096] total: 20:
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- ..
- **Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s)** [10037] total: 11:
- [https://dev-pims.th.gov.bc.ca/static/js/runtime-main.2d4bc972.js](https://dev-pims.th.gov.bc.ca/static/js/runtime-main.2d4bc972.js)
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- [https://dev-pims.th.gov.bc.ca/static/js/main.73f46a50.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/main.73f46a50.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css)
- [https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css)
- ..
- **Cookie with SameSite Attribute None** [10054] total: 2:
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/robots.txt](https://dev-pims.th.gov.bc.ca/robots.txt)
- **Proxy Disclosure** [40025] total: 15:
- [https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/main.b5c7ba0a.chunk.css)
- [https://dev-pims.th.gov.bc.ca/static](https://dev-pims.th.gov.bc.ca/static)
- [https://dev-pims.th.gov.bc.ca/logo192.png](https://dev-pims.th.gov.bc.ca/logo192.png)
- [https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css](https://dev-pims.th.gov.bc.ca/static/css/6.582ed202.chunk.css)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- ..
- **Server Leaks Version Information via "Server" HTTP Response Header Field** [10036] total: 11:
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/static/js/runtime-main.2d4bc972.js](https://dev-pims.th.gov.bc.ca/static/js/runtime-main.2d4bc972.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- [https://dev-pims.th.gov.bc.ca/manifest.json](https://dev-pims.th.gov.bc.ca/manifest.json)
- [https://dev-pims.th.gov.bc.ca/robots.txt](https://dev-pims.th.gov.bc.ca/robots.txt)
- ..
- **Cookie Slack Detector** [90027] total: 15:
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/robots.txt](https://dev-pims.th.gov.bc.ca/robots.txt)
- [https://dev-pims.th.gov.bc.ca/static/js](https://dev-pims.th.gov.bc.ca/static/js)
- [https://dev-pims.th.gov.bc.ca/static/css](https://dev-pims.th.gov.bc.ca/static/css)
- ..
- **Information Disclosure - Suspicious Comments** [10027] total: 2:
- [https://dev-pims.th.gov.bc.ca/static/js/main.73f46a50.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/main.73f46a50.chunk.js)
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- **Modern Web Application** [10109] total: 4:
- [https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js](https://dev-pims.th.gov.bc.ca/static/js/6.c613edd6.chunk.js)
- [https://dev-pims.th.gov.bc.ca/sitemap.xml](https://dev-pims.th.gov.bc.ca/sitemap.xml)
- [https://dev-pims.th.gov.bc.ca/logo192.png](https://dev-pims.th.gov.bc.ca/logo192.png)
- [https://dev-pims.th.gov.bc.ca/](https://dev-pims.th.gov.bc.ca/)
View the [following link](https://github.com/bcgov/PSP/actions/runs/1262220556) to download the report.
RunnerID:1262220556
Contributor guide
No contributing guide indexed for this repository
Research direction
Download the ZAP report from the linked GitHub Actions run and review the listed header, cookie, proxy, timestamp, and comment alerts. Trace each alert to the relevant deployment or server configuration, then rerun the scan and confirm the reported findings are resolved.
Written by the indexing model from the issue text.
Assessment
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100